I want to be able to do something like this:

    $priority = 100
    $chain = ['FOO', 'BAR']
    iptables::filter{ "$priority-mysqld-$name":
        dport    => '3306',
        state    => 'new',
        protocol => 'tcp',
        jump     => $chain,
    }

And, in iptables::filter, do something like:

    for $chain in $jump {
        include iptables::chain::$chain
        file { "$name-$chain":
            content => template("iptables/filter.erb"),
            notify => Exec[rebuild_iptables],
        }

    }

ie. include a pre-existing chain class and create an iptables fragment for each value in the $jump array.

Any idea how I might do this?